Certificate Transparency: Parse Signed Tree Heads and validate them

net/cert/ct_log_verifier_nss.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/cert/ct_log_verifier.h"
 
 #include <cryptohi.h>
 #include <keyhi.h>
 #include <nss.h>
 #include <pk11pub.h>
 #include <secitem.h>
 #include <secoid.h>
 
 #include "base/logging.h"
 #include "crypto/nss_util.h"
 #include "crypto/sha2.h"
-#include "net/cert/signed_certificate_timestamp.h"
+#include "net/cert/signed_tree_head.h"
 
 namespace net {
 
 namespace {
 
 SECOidTag GetNSSSigAlg(ct::DigitallySigned::SignatureAlgorithm alg) {
   switch (alg) {
     case ct::DigitallySigned::SIG_ALGO_RSA:
       return SEC_OID_PKCS1_RSA_ENCRYPTION;
     case ct::DigitallySigned::SIG_ALGO_DSA:
@@ skipping 105 matching lines @@
   SECStatus rv = VFY_VerifyDataDirect(
       reinterpret_cast<const unsigned char*>(data_to_sign.data()),
       data_to_sign.size(), public_key_, &sig_data,
       GetNSSSigAlg(signature_algorithm_), GetNSSHashAlg(hash_algorithm_),
       NULL, NULL);
   DVLOG(1) << "Signature verification result: " << (rv == SECSuccess);
   return rv == SECSuccess;
 }
 
 }  // namespace net